Splunk Engineer

Summary

We are seeking a skilled Splunk Engineer to join our team and play a key role in managing and optimizing our Splunk environment. The ideal candidate will have experience in architecting, deploying, and maintaining Splunk infrastructure, as well as in creating custom dashboards, alerts, and reports to support various business needs. This role involves collaborating with cross-functional teams to ensure the security, performance, and reliability of our systems through effective log management and monitoring.

Responsibilities

• Design, implement, and manage Splunk infrastructure, including Splunk indexers, forwarders, and search heads.
• Create and maintain custom dashboards, reports, and alerts to monitor key metrics and support business operations.
• Work closely with security teams to develop and implement security monitoring solutions using Splunk, including SIEM (Security Information and Event Management) configurations.
• Optimize the performance and scalability of the Splunk environment, including managing indexing and data retention policies.
• Integrate Splunk with other systems and applications, ensuring seamless data flow and log ingestion from various sources.
• Perform troubleshooting and resolution of issues related to Splunk performance, log ingestion, and data indexing.
• Develop and maintain Splunk apps and add-ons to enhance functionality and support specific use cases.
• Document the Splunk environment, including architecture diagrams, data flow, and configuration details, ensuring knowledge sharing across the team.
• Collaborate with cross-functional teams, including IT, security, and operations, to understand requirements and deliver effective log management solutions.
• Stay up-to-date with the latest Splunk features, best practices, and industry trends to continuously improve the Splunk environment.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience as a Splunk Engineer or in a similar role, with a strong background in managing Splunk infrastructure.
• Proficiency in deploying and managing Splunk Enterprise, including indexers, forwarders, search heads, and clustered environments.
• Experience in creating custom dashboards, reports, and alerts using Splunk's search processing language (SPL).
• Strong understanding of log management, data ingestion, and indexing within Splunk.
• Familiarity with scripting languages such as Python or Bash for automation tasks.
• Experience with security monitoring and SIEM configurations using Splunk.
• Strong problem-solving skills and the ability to troubleshoot complex issues related to Splunk performance and data ingestion.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Ability to work independently and manage multiple tasks in a fast-paced environment.

Benefits

• Competitive salary
• Health insurance
• 401(k) retirement plan
• Paid time off
• Professional development opportunities
• Flexible work schedule
• Remote work options